The most recent medium-size tech company I worked at is very security aware in a modern way, and uses Google IdP for employee access. But they don't trust Goog

The most recent medium-size tech company I worked at is very security aware in a modern way, and uses Google IdP for employee access. But they don't trust Google, and have been looking for a way to migrate everything away (IdP, docs and email) for some time. Everything you said about the benefits of IdP, SSO and enrolling/offboarding employees is spot on. The only problem is that some third party IdPs aren't as low-risk as they seem, if you're a small entity who cannot get corporate support in case of a problem. The risk is small but not enough, and the consequences for a small entity are severe. Loss of access to docs, email and your other service provider logins can kill a business. For larger tech companies the support hotline will answer, so it's not a problem and it makes sense to outsource. It would still be better if the company had legal rights to their own credentials on IdP as a backup, though, similar to the way they have legal rights over their domains.